Route Origin Authorization

$ cd rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/

$ rpki-client -vvf _qdh0DqaoSRZPYA5w6K9NrUGflg.roa
File:                     _qdh0DqaoSRZPYA5w6K9NrUGflg.roa (download)
Hash identifier:          oMXyiPl2HE6MGvwv6376mSIpIpbnkvNf+x/p58mxPY8=
Subject key identifier:   FE:A7:61:D0:3A:9A:A1:24:59:3D:80:39:C3:A2:BD:36:B5:06:7E:58
Certificate issuer:       /CN=3320c3e2ecf28b8c59374fa816dc4ad90e5f0cf0
Certificate serial:       0133F919
Authority key identifier: 33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/_qdh0DqaoSRZPYA5w6K9NrUGflg.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 194.62.162.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20183321 (0x133f919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3320c3e2ecf28b8c59374fa816dc4ad90e5f0cf0
        Validity
            Not Before: Jan  1 11:57:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fea761d03a9aa124593d8039c3a2bd36b5067e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:ff:15:70:d4:36:92:da:81:bc:ed:36:0b:
                    2d:39:8e:0b:72:fd:b2:3a:d5:bb:0a:53:c0:3d:67:
                    7c:79:55:5f:a6:79:ee:84:40:8a:a3:74:13:f4:7a:
                    70:bd:ad:55:85:67:ec:80:3e:b1:51:3b:e1:98:d2:
                    d5:17:b9:64:8b:3a:53:de:cd:27:c2:55:ba:4a:e2:
                    32:ea:f0:d2:ea:74:61:8f:a6:f2:5b:ca:36:b3:00:
                    d9:71:6c:d7:3f:b5:b0:d4:3c:00:56:18:80:b3:c2:
                    86:37:10:54:5d:0d:3f:bc:a8:a1:18:53:59:18:a7:
                    32:fa:8f:b9:e9:d5:f6:a2:e4:f6:68:85:a0:e0:c5:
                    7a:b6:7b:1c:d9:2b:75:86:02:6a:1b:0e:2b:80:29:
                    ba:12:e5:9b:6a:4d:2a:5b:b8:af:2f:a4:5a:10:32:
                    64:28:00:02:3b:0b:de:85:0f:8e:84:fb:a1:60:f4:
                    57:36:42:b0:1d:0a:27:13:2c:9c:c1:e9:17:08:0f:
                    df:06:31:8b:b4:c2:af:98:cc:87:ac:70:1a:14:89:
                    a8:aa:82:0b:06:c3:fe:95:8e:f3:c2:3d:da:4c:2d:
                    ba:00:86:aa:8c:9b:8c:5c:9b:1c:ea:1b:dd:a9:dc:
                    f3:86:19:d6:05:8f:5c:87:2f:3e:cd:e0:3d:10:ed:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FE:A7:61:D0:3A:9A:A1:24:59:3D:80:39:C3:A2:BD:36:B5:06:7E:58
            X509v3 Authority Key Identifier: 
                keyid:33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/_qdh0DqaoSRZPYA5w6K9NrUGflg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:c0:a8:b7:40:a1:33:25:68:dc:26:ae:f6:c3:d7:61:35:37:
         df:10:e0:10:d3:0b:d8:b1:6b:11:4c:1a:de:9b:b1:6d:a9:1c:
         d3:2b:ed:78:5d:51:d6:ba:2d:21:eb:41:10:ea:18:d5:89:95:
         25:2a:64:bc:85:75:eb:fa:ce:d1:aa:2b:13:dd:f7:29:80:4d:
         76:0c:ff:2e:2e:3f:9d:c2:4d:20:4c:76:50:c0:d3:ec:a5:17:
         e9:55:5b:5e:a7:1d:e1:1f:5e:cc:9c:0d:8d:e3:c6:10:0a:55:
         5e:db:9a:dd:e6:bf:1f:49:40:94:39:69:ec:25:e5:96:13:4e:
         58:e0:29:bd:67:38:26:26:c7:62:9a:48:80:6c:a4:ed:90:0f:
         d0:88:1f:34:da:10:ff:a7:b7:e2:45:67:43:a4:f1:34:67:f2:
         58:c3:c1:9d:fc:6f:a4:ec:b9:ae:fa:dd:62:d5:9c:73:04:a2:
         0d:3c:6c:93:c2:aa:02:e5:1b:dd:13:f6:2e:bd:62:40:6b:f8:
         93:a4:a7:79:14:9f:27:0e:4b:37:dc:65:21:40:d4:00:f8:78:
         89:9c:ef:e1:32:d7:2e:e7:a7:f5:b3:61:e8:34:6d:9e:a4:ed:
         2b:e4:25:01:05:f0:94:cb:f9:12:0f:4a:7a:90:2d:90:f0:e1:
         cd:1a:4e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 13:01:29 2022 by rpki-client.